Properly track deferred syscall patching with the syscall event

Properly track deferred syscall patching with the syscall event #292